RT and RT RTFM Extension Security Bypass Vulnerability

Bugtraq ID:	56291
Class:	Design Error
CVE:	CVE-2012-4731
Remote:	Yes
Local:	No
Published:	Oct 26 2012 12:00AM
Updated:	Mar 19 2015 09:32AM
Credit:	Reported by the vendor
Vulnerable:	Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Best Practical Solutions RT 3.8.11 Best Practical Solutions RT 3.8.10 Best Practical Solutions RT 3.8.8 Best Practical Solutions RT 3.8.6 Best Practical Solutions RT 3.8.5 Best Practical Solutions RT 3.8.4 Best Practical Solutions RT 3.8.2 Best Practical Solutions RT 4.0.6 Best Practical Solutions RT 4.0 Best Practical Solutions RT 3.8.9 Best Practical Solutions RT 3.8.12
Not Vulnerable:

RT and RT RTFM Extension Security Bypass Vulnerability

RT and RT RTFM Extension are prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

RT and RT RTFM Extension Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RT and RT RTFM Extension Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

RT and RT RTFM Extension Security Bypass Vulnerability

References:

• RT Homepage (Best Practical Solutions)